Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C89BD43ADC8711EFBF2C3B50762E951A.roa
File: C89BD43ADC8711EFBF2C3B50762E951A.roa (raw, json)
Hash identifier: EP8Gwvpw87MfryyNcQVvAhswg44/uHDtdzJxvRQTcGM=
Subject key identifier: F3:F8:96:26:58:50:03:25:B9:C5:3A:5B:A1:BB:7E:E1:12:BE:86:82
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0114A5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C89BD43ADC8711EFBF2C3B50762E951A.roa
Signing time: Mon 27 Jan 2025 08:22:02 +0000
ROA not before: Mon 27 Jan 2025 08:21:58 +0000
ROA not after: Tue 04 Mar 2025 08:21:58 +0000
asID: 138995
IP address blocks: 45.192.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70821 (0x114a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 08:21:58 2025 GMT
Not After : Mar 4 08:21:58 2025 GMT
Subject: CN=67974229-833f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:82:05:39:9c:bd:a2:8b:60:5f:1e:f4:41:72:
f0:91:37:99:89:f7:7e:02:4d:a0:94:af:aa:6e:de:
c3:18:68:9e:c6:97:15:81:86:12:3f:4a:bd:a1:90:
f1:33:b0:0b:19:48:ba:3a:c4:54:02:dc:b5:bf:b6:
08:20:3c:4a:a6:22:6b:4b:e7:2b:16:03:de:03:97:
cc:16:65:d7:6f:a3:7d:41:ae:e5:44:d1:42:08:1c:
ed:51:b3:70:6f:58:28:90:22:27:77:db:07:20:c6:
a6:69:ee:92:a8:a4:0a:d3:14:eb:62:a1:07:5a:05:
5c:6b:0c:ea:6f:32:33:83:e5:48:80:6c:cc:ff:9e:
8e:f2:5b:7b:b8:17:93:67:ed:76:3a:77:09:83:f8:
07:6b:f6:82:3d:62:ac:ae:35:0c:a6:81:9d:58:e0:
86:b5:4f:48:4a:d2:c1:ff:ad:44:cc:67:7a:ea:1f:
fa:a4:81:ec:b2:3c:93:de:cf:63:4d:90:19:9b:0b:
86:23:9e:ab:7f:54:b7:7a:95:ce:1f:40:f3:c6:df:
df:3c:38:55:79:9c:f8:4f:0d:b2:39:a9:d9:82:3f:
7d:20:a3:e5:f3:8e:54:2b:6e:b0:f2:05:d0:2f:a2:
46:f4:e1:00:cc:1d:4d:18:04:e9:33:2a:6c:39:69:
56:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F8:96:26:58:50:03:25:B9:C5:3A:5B:A1:BB:7E:E1:12:BE:86:82
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C89BD43ADC8711EFBF2C3B50762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.170.0/24
Signature Algorithm: sha256WithRSAEncryption
63:22:5f:2a:88:bc:38:3a:09:9c:c1:28:f1:19:78:2e:9c:1d:
d1:e3:da:88:79:8d:84:49:54:92:39:1a:a4:8b:33:61:ab:d1:
6a:a2:00:d9:61:2a:69:87:5f:00:6d:19:a8:9f:3a:7a:50:71:
f7:7b:3d:3b:9d:32:60:28:c7:69:14:dd:bf:8a:08:27:9c:a0:
0d:af:a8:02:cc:5c:90:fb:66:e8:e5:63:7b:ef:46:b7:ef:c0:
08:66:6f:4b:ae:65:9e:72:60:ea:8d:a3:29:36:b7:30:4b:f1:
f0:54:7f:d8:d3:4f:08:09:90:5c:74:c7:3a:6b:64:68:70:1a:
f9:d3:38:28:7b:78:72:76:20:ba:eb:8d:24:55:ae:c6:04:b9:
df:e1:12:42:94:ec:23:5e:ba:27:29:54:84:ca:64:28:96:15:
24:dd:ee:53:aa:12:8b:cb:ac:4e:0e:4c:ce:85:e7:73:fe:d8:
3b:53:20:be:5d:9d:d6:d9:ca:6a:6d:2c:fb:84:13:bf:de:af:
c1:62:fa:d0:6b:63:83:78:ae:88:a9:d9:34:40:85:f7:50:5f:
7b:1f:ca:0a:04:88:37:b3:f1:d5:c5:bd:c3:a7:f6:6e:99:45:
57:29:94:c2:3e:42:cb:92:3f:3c:9d:75:d7:a3:6e:ba:15:10:
01:da:c5:f6
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARSlMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI3MDgyMTU4WhcNMjUwMzA0MDgyMTU4WjAYMRYw
FAYDVQQDEw02Nzk3NDIyOS04MzNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0oIFOZy9ootgXx70QXLwkTeZifd+Ak2glK+qbt7DGGiexpcVgYYSP0q9
oZDxM7ALGUi6OsRUAty1v7YIIDxKpiJrS+crFgPeA5fMFmXXb6N9Qa7lRNFCCBzt
UbNwb1gokCInd9sHIMamae6SqKQK0xTrYqEHWgVcawzqbzIzg+VIgGzM/56O8lt7
uBeTZ+12OncJg/gHa/aCPWKsrjUMpoGdWOCGtU9IStLB/61EzGd66h/6pIHssjyT
3s9jTZAZmwuGI56rf1S3epXOH0Dzxt/fPDhVeZz4Tw2yOanZgj99IKPl845UK26w
8gXQL6JG9OEAzB1NGATpMypsOWlWzQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPP4
liZYUAMlucU6W6G7fuESvoaCMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DODlCRDQzQURDODcxMUVGQkYyQzNCNTA3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcCqMA0GCSqGSIb3DQEBCwUA
A4IBAQBjIl8qiLw4OgmcwSjxGXgunB3R49qIeY2ESVSSORqkizNhq9FqogDZYSpp
h18AbRmonzp6UHH3ez07nTJgKMdpFN2/iggnnKANr6gCzFyQ+2bo5WN770a378AI
Zm9LrmWecmDqjaMpNrcwS/HwVH/Y008ICZBcdMc6a2RocBr50zgoe3hydiC6640k
Va7GBLnf4RJClOwjXronKVSEymQolhUk3e5TqhKLy6xODkzOhedz/tg7UyC+XZ3W
2cpqbSz7hBO/3q/BYvrQa2ODeK6Iqdk0QIX3UF97H8oKBIg3s/HVxb3Dp/ZumUVX
KZTCPkLLkj88nXXXo266FRAB2sX2
-----END CERTIFICATE-----
Generated at Sun Apr 27 06:49:20 2025 by rpki-client